Cisco MDS-9124 Troubleshooting Guide - Page 337
Verifying TACACS+ Server Monitor Configuration Using Fabric Manager, Verifying TACACS+ Server
View all Cisco MDS-9124 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 337 highlights
Chapter 17 Troubleshooting RADIUS and TACACS+ AAA Issues Send documentation comments to [email protected] Verifying TACACS+ Server Monitor Configuration Using Fabric Manager To verify or change the TACACS+ server monitor configuration using Fabric Manager, follow these steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 Step 12 Choose Switches > Security > AAA > TACACS+ and select the Servers tab. You see the TACACS+ configuration in the Information panel. Highlight the server that you need to change and click Delete Row to delete this server configuration. Click Create Row to add a new TACACS+ server. Set the KeyType and Key fields to the preshared key configured on the TACACS+ server. Set the AuthPort and AcctPort fields to the authentication and accounting ports configured on the TACACS+ server. Set the Idle Time field to configure the time that the switch waits for a TACACS+ server to be idle before sending a test message to see if the server is still alive. Set the TimeOut value and click Apply to save these changes. Select the CFS tab and select commit from the Config Action drop-down menu and click Apply Changes to distribute these changes to all switches in the fabric. Choose Switches > Security > AAA and click Create Row to create a server group. Check the list of switches that you want to configure server groups on. Set the Server List field to a comma-separated list of TACACS+ servers. Set the Deadtime field to configure the time that the switch waits before retesting a dead server. and click Apply to save these changes. Verifying TACACS+ Server Monitor Configuration Using the CLI To verify or change the TACACS+ server monitor configuration using the CLI, follow these steps: Step 1 Step 2 Step 3 Step 4 Use the show running-config command to view the TACACS+ configuration for the server monitor. switch# show running-config | begin tacacs tacacs-server deadtime 40 tacacs-server host 11.6.5.4 key 7 "VagwwtFjq" tacacs-server host 11.6.5.4 test idle-time 30 Use the tacacs-server host ip address test idle-time command to configure the time that the switch waits for a TACACS+ server to be idle before sending a test message to see if the server is still alive. Use the tacacs-server deadtime command to configure the time that the switch waits before retesting a dead server. Use the tacacs commit command to commit any changes and distribute to all switches in the fabric. OL-9285-05 Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x 17-7